Author: gk
Date: Fri Oct 11 11:52:43 2019
New Revision: 1868288

URL: http://svn.apache.org/viewvc?rev=1868288&view=rev
Log:
- update OWASP
- add deprecated tag for DefaultSessionTimeoutValve.java

Modified:
    turbine/core/trunk/conf/test/ConfigurationBuilder.xml
    
turbine/core/trunk/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java

Modified: turbine/core/trunk/conf/test/ConfigurationBuilder.xml
URL: 
http://svn.apache.org/viewvc/turbine/core/trunk/conf/test/ConfigurationBuilder.xml?rev=1868288&r1=1868287&r2=1868288&view=diff
==============================================================================
--- turbine/core/trunk/conf/test/ConfigurationBuilder.xml (original)
+++ turbine/core/trunk/conf/test/ConfigurationBuilder.xml Fri Oct 11 11:52:43 
2019
@@ -8,6 +8,7 @@
     <properties config-name="user" fileName="usersettings.properties" 
config-optional="true" config-forceCreate="true"/>
     <xml fileName="TurbineResources.xml"/>
     <properties config-name="turbine" fileName="TemplateService.properties" 
throwExceptionOnMissing="true"/>
+    <jndi/>
   </override>
   <additional>
     <!-- Configuration declarations that form a union configuration, always 
provide a unique config-name attribute  -->

Modified: 
turbine/core/trunk/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java
URL: 
http://svn.apache.org/viewvc/turbine/core/trunk/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java?rev=1868288&r1=1868287&r2=1868288&view=diff
==============================================================================
--- 
turbine/core/trunk/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java
 (original)
+++ 
turbine/core/trunk/src/java/org/apache/turbine/pipeline/DefaultSessionTimeoutValve.java
 Fri Oct 11 11:52:43 2019
@@ -36,7 +36,10 @@ import org.apache.turbine.util.TurbineEx
  * @author <a href="mailto:[email protected]";>Martin Poeschl</a>
  * @author <a href="mailto:[email protected]";>Peter Courcoux</a>
  * @version $Id$
+ * 
+ * No replacement. Delegate session timeout to the container e.g. in web.xml, 
which allows to create a session at any place. 
  */
+@Deprecated
 public class DefaultSessionTimeoutValve
     implements Valve
 {


Reply via email to